Cases · Did an AI agent act: yes · Stage of use: in live use · Root cause: a safeguard that was in place did not hold
| What happened | What went wrong | Severity | Earliest source |
|---|---|---|---|
| SalesBleed: 0-click data exfiltration from Salesforce Agentforce via indirect prompt injection in Web-to-Lead form Salesforceminor · earliest source 2026-09-24 | security breach | minor | 2026-09-24 |
| Aur0ra hackers use Cursor AI agent to breach Belgian chemical firm and at least six other companies Anthropicmajor · earliest source 2026-09-01 | security breach | major | 2026-09-01 |
Showing 1–2 of 2. Or take the JSON.